Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8154AEEF5E511EF99DBD3A3762E951A.roa
File: F8154AEEF5E511EF99DBD3A3762E951A.roa (raw, json)
Hash identifier: ly1JhiZgcViw6mcoYCY453yIcdDCjZ2YmJHfemQbZdU=
Subject key identifier: 78:8D:47:48:2A:D4:36:5B:E9:F8:1C:E2:66:67:FA:0E:83:70:37:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E85
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8154AEEF5E511EF99DBD3A3762E951A.roa
Signing time: Fri 28 Feb 2025 15:09:13 +0000
ROA not before: Fri 28 Feb 2025 15:09:09 +0000
ROA not after: Sun 13 Apr 2025 15:09:09 +0000
asID: 138915
IP address blocks: 156.244.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81541 (0x13e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 15:09:09 2025 GMT
Not After : Apr 13 15:09:09 2025 GMT
Subject: CN=67c1d199-bb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:3c:b5:fc:64:d8:c1:c7:a6:1d:d9:d1:d1:
a7:dd:91:71:43:83:2d:bc:85:73:2b:31:db:e3:0b:
96:0c:9f:a8:8a:e9:32:ec:86:ce:33:0e:51:6e:37:
a2:f2:90:ac:62:1d:38:3b:ab:33:e5:7b:67:77:b6:
82:ff:62:32:64:9d:73:c6:7f:d7:eb:c9:83:d6:c4:
23:2c:b7:fa:dd:f4:a0:61:17:8b:66:d1:c5:c5:eb:
8c:15:80:78:bf:da:cc:8b:d9:0f:27:35:fd:9c:3c:
19:a2:86:49:92:3f:52:50:fb:97:bc:ac:0a:fd:22:
5d:1c:e8:79:64:59:62:c1:a3:38:48:59:66:db:9f:
71:c6:67:b4:44:ac:63:82:78:2d:66:93:61:7b:95:
09:30:42:49:f7:ed:09:e2:cc:3c:30:29:0f:be:b9:
36:69:4f:b5:b0:19:63:25:ff:88:72:26:bf:3a:93:
d9:50:f8:16:c3:4c:80:fa:90:f9:03:c4:a1:ea:53:
bc:d7:4a:41:16:17:32:59:c8:7e:c6:b2:e7:c7:4a:
ed:bf:a7:a5:b2:f1:3e:d3:e0:dc:dd:d6:81:e4:22:
18:48:63:4c:d8:86:04:3c:8e:a0:c4:4d:48:57:63:
c5:fa:32:22:a9:77:0c:68:a3:19:84:d5:15:bd:1a:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:47:48:2A:D4:36:5B:E9:F8:1C:E2:66:67:FA:0E:83:70:37:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8154AEEF5E511EF99DBD3A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
65:87:e5:4c:89:7b:fe:4e:8e:b9:46:34:45:9f:e4:9d:3e:69:
8a:06:a5:27:3e:f8:6e:ea:c7:c8:80:68:fe:9a:67:d0:b2:94:
e0:c4:dd:79:92:24:61:19:fa:41:32:26:32:e3:0e:fb:19:ac:
26:22:32:9f:da:62:42:a9:74:13:94:df:8c:20:bb:cc:58:3b:
d3:e0:cf:da:08:8c:f5:d3:31:84:f5:0f:27:58:ff:a4:c0:09:
f3:cb:60:08:ba:a3:79:13:e6:1a:fe:a8:d1:4a:15:f2:dc:c2:
ba:68:11:dc:4a:b4:bd:6a:e9:d1:7e:7d:ad:5d:27:7e:f2:6c:
10:38:0a:23:8c:31:ab:8b:82:a1:03:d9:95:7e:27:b1:b0:ac:
bf:2f:97:fe:de:91:a0:d1:7d:35:fb:4e:52:0b:c9:89:99:dc:
d1:e4:a2:3f:e1:ef:21:a2:90:99:e1:a0:2f:d5:8a:f8:3b:db:
10:d4:25:98:b0:a2:da:e5:d3:0f:51:3d:88:98:f4:53:67:cb:
b6:1e:b1:dd:56:7b:26:c3:02:8a:7e:04:79:cf:a0:65:87:c3:
0a:ff:b8:aa:e2:e3:a4:d3:77:aa:83:75:b5:e4:72:4d:0a:a0:
82:57:11:48:2d:02:da:2d:a7:9c:20:16:da:f5:29:d5:ae:fe:
94:03:d7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:30 2025 by rpki-client